How to start the transition from CMMC Level 1 to CMMC Level 2
You’ve implemented your small business cybersecurity protection program to meet all the FAR 52.204-21 (aka FAR 52.240-93) basic protections for Federal Contract Information (FCI). You’ve
You’ve implemented your small business cybersecurity protection program to meet all the FAR 52.204-21 (aka FAR 52.240-93) basic protections for Federal Contract Information (FCI). You’ve
How much does CMMC cost, and how long is it going to take my company to comply? These are the two most frequently asked questions
Government contractors handling technical or mission-related information during the performance of their contracts need to be cognizant of the National Institute of Standards and Technology
If you’ve spent any amount of time digging through the NIST 800-171 cybersecurity requirements, you’ve likely thought to yourself, “what the heck does ______ mean?”
US Department of Defense (DoD) contractors that handle Controlled Unclassified Information (CUI) are subject to the DoD’s Cybersecurity Maturity Model Certification (CMMC) Level 2 assessments.
Federal government contractors that handle Controlled Unclassified Information (CUI) must implement the National Institutes of Standards and Technology (NIST) Special Publication 800-171. NIST 800-171 lists
All federal government contractors handle Federal Contract Information (FCI) in some form or another. We cover the definition of FCI in a previous post, but
Government contractors that handle –store, process, or transmit– Controlled Unclassified Information (CUI) must implement the National Institutes of Standards and Technology (NIST) 800-171 standard to
As we’ve stated previously, all federal government contractors, even subcontractors, suppliers, and vendors, handle Federal Contract Information (FCI) and must implement the FAR 52.204-21 clause